CVE-2024-11029
Freeipa: administrative user data leaked through systemd journal
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Freeipa: administrative user data leaked through systemd journal
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
- Record
CVE-2024-11029- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-497
- Updated
- 2026-11-05
EUVDEUVD-2024-34378
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
- Record
EUVD-2024-34378- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-05
GitHub AdvisoriesGHSA-45q7-xhfm-xqjp
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to...
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
- Record
GHSA-45q7-xhfm-xqjp- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-497
- Updated
- 2026-11-02
NVD
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
- Record
CVE-2024-11029- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-497
- Updated
- 2026-11-05
OSVDEBIAN-CVE-2024-11029
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
- Record
DEBIAN-CVE-2024-11029- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-07
OSVRHSA-2025:0334
Red Hat Security Advisory: ipa security update
- Record
RHSA-2025:0334- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2024-11029
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
- Record
UBUNTU-CVE-2024-11029- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVALSA-2025:0334 No score
Moderate: ipa security update
AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.
Security Fix(es):
- freeipa: Administrative user data leaked through systemd journal (CVE-2024-11029)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:0334- Updated
- 2026-11-02
OSVCLSA-2026-1778881463 No score
ipa: Fix of 3 CVEs
- CVE-2023-5455: fix CSRF vulnerability by adding Referer header check to all session endpoints
- CVE-2024-1481: validate Kerberos principal name before kinit and pass it with -- separator to prevent option injection
- CVE-2024-11029: scrub administrative passwords from process command line and pass OIDC client secret via stdin
- Record
CLSA-2026-1778881463- Updated
- 2026-11-02
OSV No score
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
- Record
CVE-2024-11029- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ipa-clientAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
ipa-client-commonAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
ipa-client-epnAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
ipa-client-sambaAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
ipa-commonAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
ipa-selinuxAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
ipa-selinux-lunaAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
ipa-selinux-nfastAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
ipa-serverAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
ipa-server-commonAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
Show 55 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ipa-server-dnsAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
ipa-server-trust-adAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
python3-ipaclientAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
python3-ipalibAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
python3-ipaserverAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
python3-ipatestsAlmaLinux:9 |
before 4.12.2-1.el9_5.3 | 4.12.2-1.el9_5.3 |
ipa-clientTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
ipa-client-commonTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
ipa-client-epnTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
ipa-client-sambaTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
ipa-commonTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
ipa-python-compatTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
ipa-selinuxTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
ipa-serverTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
ipa-server-commonTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
ipa-server-dnsTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
ipa-server-trust-adTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
python3-ipaclientTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
python3-ipalibTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
python3-ipaserverTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
python3-ipatestsTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 4.10.1-9.el9_2.alma.1.tuxcare.els3 | 4.10.1-9.el9_2.alma.1.tuxcare.els3 |
freeipaDebian:12 |
All versions, plus listed versions 4.10.1+dfsg1-1+exp14.10.1-1+exp14.10.2-14.10.2-24.10.2-2+exp1 Show 14 moreShow less4.11.1-14.11.1-1+exp14.11.1-24.11.1-2+exp14.11.1-2.14.12.2-14.12.2-24.12.2-34.12.4-14.12.4-24.13.1-14.9.11-14.9.11-1+exp14.9.11-2 |
None known |
freeipaDebian:13 |
before 4.12.4-1 | 4.12.4-1 |
freeipaDebian:14 |
before 4.12.4-1 | 4.12.4-1 |
ipaRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-clientRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-client-commonRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-client-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-client-epnRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-client-sambaRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-commonRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-selinuxRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-selinux-lunaRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-selinux-nfastRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-serverRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-server-commonRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-server-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-server-dnsRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-server-trust-adRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
ipa-server-trust-ad-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
python3-ipaclientRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
python3-ipalibRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
python3-ipaserverRed Hat:enterprise_linux:9::appstream |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
python3-ipatestsRed Hat:enterprise_linux:9::crb |
before 0:4.12.2-1.el9_5.3 | 0:4.12.2-1.el9_5.3 |
freeipaUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.2.1-0ubuntu13.3.4-0ubuntu13.3.4-0ubuntu23.3.4-0ubuntu33.3.4-0ubuntu3.13.3.4-0ubuntu3.1+esm1 |
None known |
freeipaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.1.4-14.3.1-0ubuntu14.3.1-0ubuntu1+esm1 |
None known |
freeipaUbuntu:18.04:LTS |
All versions, plus listed versions 4.4.4-3ubuntu14.4.4-44.7.0~pre1+git20180411-2ubuntu14.7.0~pre1+git20180411-2ubuntu2 |
None known |
freeipaUbuntu:20.04:LTS |
All versions, plus listed versions 4.8.1-2ubuntu14.8.3-14.8.6-1ubuntu2 |
None known |
freeipaUbuntu:22.04:LTS |
All versions, plus listed versions 4.8.6-1ubuntu64.8.6-1ubuntu84.8.6-1ubuntu94.9.8-1 |
None known |
freeipaUbuntu:24.04:LTS |
All versions, plus listed versions 4.10.2-14.10.2-24.10.2-2ubuntu34.11.1-14.11.1-2 |
None known |
freeipaUbuntu:25.10 |
All versions, plus listed versions 4.12.2-34.12.4-1 |
None known |
freeipaUbuntu:26.10 |
All versions, plus listed versions 4.13.1-14.13.1-1build1 |
None known |
freeipaUbuntu:26.04:LTS |
All versions, plus listed versions 4.12.4-14.12.4-24.13.1-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | CVE List, NVD | |
| facts | EUVD | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-11029 is a medium vulnerability (CVSS 5.5) in Red Hat Enterprise Linux 10, published January 15, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 14th percentile. Fixed in ipa-client 4.12.2-1.el9_5.3.
References
access.redhat.com/errata/RHSA-2025:0334
bugzilla.redhat.com/show_bug.cgi?id=2325557
nvd.nist.gov/vuln/detail/CVE-2024-11029
github.com/advisories/GHSA-45q7-xhfm-xqjp
Show 7 moreShow less
errata.almalinux.org/9/ALSA-2025-0334.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778881463.html
security-tracker.debian.org/tracker/CVE-2024-11029
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0334.json
cve.org/CVERecord?id=CVE-2024-11029
ubuntu.com/security/CVE-2024-11029